基于MSF的Windows系统漏洞溢出仿真实验  

MSF-based Overflow Vulnerability in Windows System Simulation

作　　者：张红瑞[1] 吕延岗[1] 冯秀彦[1] 习亚峰[2] 

机构地区：[1]石家庄职业技术学院信息工程系,河北石家庄050081 [2]石家庄职业技术学院办公室,河北石家庄050081

出　　处：《实验室研究与探索》2012年第12期242-244,共3页Research and Exploration In Laboratory

基　　金：河北省高等学校科学研究计划课题(Z2011273);河北省教育学会"十二五"教育规划课题(XHXNO:12110501)

摘　　要：在分析Stuxnet蠕虫病毒的基础上,介绍该病毒所利用的MS10_046系统漏洞原理及机制。利用VMWare和MSF(MetaSploit FrameWork)搭建局域网实验环境平台,设计MS10_046漏洞溢出实验的方法与步骤,在得到的Cmd Shell命令行下建立了测试帐户并对测试帐户进行了提权处理,最后给出了对系统漏洞的一些防范措施。结果表明,基于MSF的实验平台可以很好地验证系统存在的已知漏洞,从而帮助用户做好系统的防范措施。Based on the analysis of Stuxnet worm virus,the MS10_046 system vulnerabilities and mechanism of the virus were introduced.The VMWare and MSF（MetaSploit FrameWork） were used to build local area network experiment platform.Besides,the MS10_046 overflow vulnerability experimental methods and steps were designed.Moreover,a test account was established to enhance the users＇ permissions after the Cmd Shell command line was obtained.Finally,some preventive measures for system vulnerabilities were provided.The results show that MSF-based experiment platform can well validate the vulnerabilities of the system and help users take preventive measures.

关 键 词：系统漏洞 漏洞溢出 MSF VMWARE MS10_046 安全漏润 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]